This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft File: g02WbQCvvDm1lYvBpu1Xk__AxU0.mft (raw, json) Hash identifier: WjUf4qMoP6VFu3kjVcrJcSdmdVc1i/mJz+qaA0Ma/m8= Subject key identifier: 32:01:4E:CC:21:36:65:D6:23:5F:30:64:25:D6:A7:BA:9B:6B:81:11 Authority key identifier: 83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D Certificate issuer: /CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d Certificate serial: 019AF2766C22DE033D8FA00C8B5A59AB7749 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: IOmKwvAlqovOqDg8R3XEjQKQn3k.roa (hash: /PNQa25f3KzGjHOJXgALCT84CCr36de+6y0mC+W9C/U=) 2: g02WbQCvvDm1lYvBpu1Xk__AxU0.crl (hash: psvRKBIllpOwTFZl3zOgqx1med1x43ZCWd62fetQXb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6c:22:de:03:3d:8f:a0:0c:8b:5a:59:ab:77:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=32014ecc213665d6235f306425d6a7ba9b6b8111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a8:0a:64:34:9f:f8:b2:f1:d5:49:54:91:62: b0:a3:84:27:50:36:70:45:e9:06:3e:ab:21:be:df: 19:31:33:2c:e6:c9:2c:24:de:70:5b:f2:c4:3a:28: ae:af:74:f5:25:55:17:46:3e:47:93:cf:8d:f6:39: 43:c9:20:2f:3e:c8:45:9f:09:a0:58:02:98:ab:1e: a2:62:c1:67:63:ad:5a:62:d8:4f:3a:89:3a:3f:42: 60:1b:c5:99:99:34:d4:9c:e4:5a:7e:8e:ad:88:c7: bb:5a:fc:ab:bc:71:ab:a7:9f:a7:45:db:a4:19:e4: 3f:08:92:04:67:ae:d9:74:d4:83:c1:1b:4b:d2:4f: 3c:a6:a8:77:03:c0:57:7d:ae:47:9e:4e:dc:77:5c: bb:b3:b6:2b:ca:0c:63:e7:a5:45:a8:87:d8:ed:9e: a8:c1:5a:28:b7:71:ca:f0:ed:e5:33:37:cd:cb:41: fa:51:bc:ce:59:fe:d5:ee:ef:98:4e:ca:3e:4c:f6: 16:49:a2:e6:03:37:4a:58:b8:3d:57:90:b8:8b:ef: f4:af:52:37:b8:56:96:86:03:7e:f8:9d:cb:c9:cb: 22:bd:25:91:54:ec:c7:fc:c7:4c:21:a2:fe:19:96: a2:45:ed:67:c1:41:40:36:83:07:d2:7b:31:5f:49: bd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:01:4E:CC:21:36:65:D6:23:5F:30:64:25:D6:A7:BA:9B:6B:81:11 X509v3 Authority Key Identifier: keyid:83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f2:2f:44:89:51:9b:c6:39:76:2f:71:c6:23:ba:79:6e:36: 63:f4:1d:d1:7a:b5:c9:d0:24:ff:7a:d8:f4:55:de:cc:5d:e5: d1:b8:0b:df:67:48:18:1f:4d:90:f1:b8:8d:ee:d5:17:ae:33: ac:49:eb:29:39:07:7a:9f:a7:10:fa:3c:d3:3e:d9:54:a8:05: 3e:ee:fa:99:99:60:d4:73:ff:1d:a8:be:7c:ae:9d:b3:73:37: 89:60:51:d7:f7:9d:43:d5:3b:80:e1:fe:cd:ad:cc:11:f8:b4: 58:c7:27:2a:44:6c:06:86:42:ad:83:aa:fa:3e:42:97:25:7f: 32:7f:d9:18:5b:b1:6e:30:ca:bf:9f:af:e0:ed:13:22:08:9d: 3e:84:8e:d0:19:e8:ef:26:77:1c:94:54:21:d4:92:7c:be:53: 59:95:43:4a:47:60:01:18:d1:3b:c4:f9:fa:75:c8:81:08:e3: 73:fe:b5:72:63:b2:57:e6:15:f9:d0:59:d2:7e:05:f0:3c:aa: d4:e8:55:6f:ce:2e:9f:f7:cd:be:e4:d1:e8:2d:f5:1d:65:b5: 3a:c7:70:76:f2:65:a6:83:dd:62:c8:1a:fd:b8:81:9c:80:e6: 8b:58:0e:f9:2b:25:83:47:65:fd:57:78:90:9d:bd:ab:8d:58: 81:c1:9e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmwi3gM9j6AMi1pZq3dJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNGQ5NjZkMDBhZmJjMzliNTk1OGJjMWE2ZWQ1NzkzZmZj MGM1NGQwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD EygzMjAxNGVjYzIxMzY2NWQ2MjM1ZjMwNjQyNWQ2YTdiYTliNmI4MTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyagKZDSf+LLx1UlUkWKwo4QnUDZw RekGPqshvt8ZMTMs5sksJN5wW/LEOiiur3T1JVUXRj5Hk8+N9jlDySAvPshFnwmg WAKYqx6iYsFnY61aYthPOok6P0JgG8WZmTTUnORafo6tiMe7WvyrvHGrp5+nRduk GeQ/CJIEZ67ZdNSDwRtL0k88pqh3A8BXfa5Hnk7cd1y7s7Yrygxj56VFqIfY7Z6o wVoot3HK8O3lMzfNy0H6UbzOWf7V7u+YTso+TPYWSaLmAzdKWLg9V5C4i+/0r1I3 uFaWhgN++J3LycsivSWRVOzH/MdMIaL+GZaiRe1nwUFANoMH0nsxX0m95wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIBTswhNmXWI18wZCXWp7qba4ERMB8GA1UdIwQY MBaAFINNlm0Ar7w5tZWLwabtV5P/wMVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ODMwYTQtNmM4My00MzM4LWJhZmQt YjVkMWU5MDIzMTBhLzEvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84ODMwYTQtNmM4My00MzM4LWJhZmQtYjVkMWU5MDIzMTBh LzEvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvIvRIlR m8Y5di9xxiO6eW42Y/Qd0Xq1ydAk/3rY9FXezF3l0bgL32dIGB9NkPG4je7VF64z rEnrKTkHep+nEPo80z7ZVKgFPu76mZlg1HP/Hai+fK6ds3M3iWBR1/edQ9U7gOH+ za3MEfi0WMcnKkRsBoZCrYOq+j5ClyV/Mn/ZGFuxbjDKv5+v4O0TIgidPoSO0Bno 7yZ3HJRUIdSSfL5TWZVDSkdgARjRO8T5+nXIgQjjc/61cmOyV+YV+dBZ0n4F8Dyq 1OhVb84un/fNvuTR6C31HWW1OsdwdvJlpoPdYsga/biBnIDmi1gO+Sslg0dl/Vd4 kJ29q41YgcGefQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:39 2025 by rpki-client